GitHub Introduces 3-Day Dependabot Cooldown to Mitigate Poisoned Package Attacks
GitHub has announced a new cooldown mechanism for Dependabot that introduces a mandatory three-day waiting period before opening pull requests for version…
Tag: Python Package Index (PyPI)
PyPI: Python Package Repository
The Python Package Index is the official repository for third-party Python packages, providing a platform for developers to publish and install software.…
Python Package Index (PyPI) — Cybersecurity company profile
Python Package Index (PyPI) was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber…
OceanLotus Targets Vietnam Investors With SPECTRALVIPER in FireAnt Supply Chain Attack
ESET has uncovered two campaigns by the Vietnam-aligned threat actor OceanLotus (APT32) targeting domestic entities and stock investors with the SPECTRALVIPER backdoor.…
Python Package Index (PyPI) — Cybersecurity product profile
Python Package Index (PyPI) was identified as a relevant cybersecurity entity in recently ingested reporting. This profile is generated so related cyber…